last executing test programs: 12.191608523s ago: executing program 2 (id=1320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r2}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 11.03918107s ago: executing program 2 (id=1329): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001400)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000046) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x60}}, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_clone3(&(0x7f0000001280)={0xa824cba56d560427, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140), {0x15}, &(0x7f0000000180)=""/153, 0x99, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) prlimit64(r7, 0x7, &(0x7f0000001300)={0x200, 0x9}, &(0x7f0000001340)) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1000003) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000100)=0x8) ioctl$KVM_GET_MP_STATE(r9, 0x8004ae98, &(0x7f0000000040)) 10.304549626s ago: executing program 2 (id=1334): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x4, &(0x7f0000000280)=[{0x5, 0xcc, 0xd2, 0xffffff58}, {0x8, 0xa4, 0x26, 0x7}, {0x7, 0x9, 0xfe, 0x8000}, {0x2, 0x9, 0x5, 0x6}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x51a9497) userfaultfd(0x80001) set_mempolicy(0x3, 0x0, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00002cd000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) syslog(0x4, 0x0, 0x0) 7.243492505s ago: executing program 1 (id=1347): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r0, 0x1) 7.225132895s ago: executing program 0 (id=1348): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008014}], 0x1, 0x4814) r5 = socket$kcm(0xa, 0x2, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f0000001080)=ANY=[@ANYRES64=r5], 0x0) 6.606910062s ago: executing program 1 (id=1350): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 6.410132348s ago: executing program 4 (id=1352): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000000580)="2d8c", 0x2}], 0x1, 0x1) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) splice(r0, 0x0, r1, 0x0, 0xfffd, 0xa) 5.847529492s ago: executing program 4 (id=1354): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x14, 0x2, 0x4) getpeername$l2tp(r0, 0x0, &(0x7f0000000180)) 5.75616532s ago: executing program 1 (id=1355): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 5.718045618s ago: executing program 0 (id=1357): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001400)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000046) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x60}}, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_clone3(&(0x7f0000001280)={0xa824cba56d560427, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140), {0x15}, &(0x7f0000000180)=""/153, 0x99, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) prlimit64(r7, 0x7, &(0x7f0000001300)={0x200, 0x9}, &(0x7f0000001340)) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1000003) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000100)=0x8) ioctl$KVM_GET_MP_STATE(r9, 0x8004ae98, &(0x7f0000000040)) 5.104407741s ago: executing program 2 (id=1358): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.092976284s ago: executing program 1 (id=1359): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300"], 0x44}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000840), r7) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x2, 0x0, 0x0, 0x0, 0x2000004}}) accept$nfc_llcp(r9, &(0x7f0000000280), &(0x7f0000000180)=0x60) sendmsg$NLBL_CIPSOV4_C_LIST(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4010) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3ff, 0x7f, 0x15fe, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]}) 5.00770985s ago: executing program 0 (id=1361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x44, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000580)={r3, 0xe8, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f7"}, &(0x7f0000000180)=0xf0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f73"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r8, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) 4.844314847s ago: executing program 2 (id=1362): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 4.788080588s ago: executing program 3 (id=1363): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x2120, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 4.0575939s ago: executing program 1 (id=1364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x400c0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4) 3.98847091s ago: executing program 2 (id=1365): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 3.921719153s ago: executing program 3 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) signalfd4(r2, 0x0, 0x0, 0x80800) fanotify_init(0x0, 0x0) r3 = memfd_secret(0x80000) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000100), 0x1) userfaultfd(0x80001) set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5) socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00002cd000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 3.894746451s ago: executing program 0 (id=1367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x9}, 0xc) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x10001, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, 'syz1\x00', @default, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCNRDECOBS(r1, 0x89e2) 3.252380065s ago: executing program 4 (id=1368): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000000, 0x2, 0x0, 0x18, 0x8915, 0x7fff}, 0x20) 3.21459745s ago: executing program 4 (id=1369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x24000004) 864.89624ms ago: executing program 0 (id=1370): r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000700)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xfffffcc6, &(0x7f0000000180)=[{&(0x7f0000000280)="eb673468a1d4b3f1ac274e1633766522438f7d55a7f22df8e28fc6ec8d677cf78b41c22adf922d8bef985d6e2242f74b76e8ed3038ce5bca5dabc1927dfeca095f55603aaaac3bbde75cd6d775f9ee1ad23211415025ae15790d7c3f2fcb9953bca2f88e0798e851b1883787c13914dd9efa5dcdee42c7cb7c44a90bae28cc85cf22b325ff568f85d0124eea958e8cc8ca5f5983730a7f86af2b24", 0x8e}], 0x1}, 0x20008081) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x11, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x4008010) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x4000000) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 831.880766ms ago: executing program 4 (id=1371): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001400)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000046) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x60}}, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_clone3(&(0x7f0000001280)={0xa824cba56d560427, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140), {0x15}, &(0x7f0000000180)=""/153, 0x99, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) prlimit64(r7, 0x7, &(0x7f0000001300)={0x200, 0x9}, &(0x7f0000001340)) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1000003) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000100)=0x8) ioctl$KVM_GET_MP_STATE(r9, 0x8004ae98, &(0x7f0000000040)) 814.338348ms ago: executing program 3 (id=1372): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) 753.25772ms ago: executing program 1 (id=1373): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r1, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x7) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x20000000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, 0x0) 665.007094ms ago: executing program 3 (id=1374): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x44000) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x20, 0x1406, 0x200, 0x70bd2e, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4024000}, 0x0) 567.793704ms ago: executing program 3 (id=1375): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 80.207626ms ago: executing program 0 (id=1376): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, &(0x7f0000001300)}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x2120, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 18.106875ms ago: executing program 3 (id=1377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x44, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000580)={r3, 0xe8, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f7"}, &(0x7f0000000180)=0xf0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f73"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r8, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=1378): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x14, 0x2, 0x4) getpeername$l2tp(r0, 0x0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 67.508387][ T5828] cgroup: Unknown subsys name 'net' [ 67.639951][ T5828] cgroup: Unknown subsys name 'cpuset' [ 67.648976][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.101658][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.399596][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.405974][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.741499][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.762660][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.770622][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.781678][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.782648][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.797139][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.798812][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.805477][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.813152][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.822952][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.826713][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.841442][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.842066][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.850264][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.858698][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.863561][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.871320][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.880231][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.887946][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.890889][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.899421][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.909310][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.919384][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.928724][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.939483][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.509865][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 73.561924][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 73.665303][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 73.718424][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 73.735850][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 73.891170][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.898635][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.905912][ T5840] bridge_slave_0: entered allmulticast mode [ 73.913398][ T5840] bridge_slave_0: entered promiscuous mode [ 73.942048][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.949199][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.956724][ T5843] bridge_slave_0: entered allmulticast mode [ 73.964295][ T5843] bridge_slave_0: entered promiscuous mode [ 73.972144][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.980112][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.987978][ T5843] bridge_slave_1: entered allmulticast mode [ 73.995072][ T5843] bridge_slave_1: entered promiscuous mode [ 74.012018][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.019199][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.026393][ T5840] bridge_slave_1: entered allmulticast mode [ 74.033266][ T5840] bridge_slave_1: entered promiscuous mode [ 74.045255][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.052897][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.060345][ T5841] bridge_slave_0: entered allmulticast mode [ 74.067857][ T5841] bridge_slave_0: entered promiscuous mode [ 74.101544][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.108783][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.116030][ T5841] bridge_slave_1: entered allmulticast mode [ 74.123755][ T5841] bridge_slave_1: entered promiscuous mode [ 74.141508][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.192992][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.204452][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.233007][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.240341][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.247795][ T5842] bridge_slave_0: entered allmulticast mode [ 74.254693][ T5842] bridge_slave_0: entered promiscuous mode [ 74.272219][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.281893][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.289144][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.296294][ T5845] bridge_slave_0: entered allmulticast mode [ 74.303483][ T5845] bridge_slave_0: entered promiscuous mode [ 74.312706][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.322154][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.329519][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.336797][ T5842] bridge_slave_1: entered allmulticast mode [ 74.343792][ T5842] bridge_slave_1: entered promiscuous mode [ 74.368214][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.375342][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.382661][ T5845] bridge_slave_1: entered allmulticast mode [ 74.390150][ T5845] bridge_slave_1: entered promiscuous mode [ 74.399057][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.418445][ T5843] team0: Port device team_slave_0 added [ 74.461967][ T5843] team0: Port device team_slave_1 added [ 74.469538][ T5840] team0: Port device team_slave_0 added [ 74.499475][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.519100][ T5840] team0: Port device team_slave_1 added [ 74.527341][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.538092][ T5841] team0: Port device team_slave_0 added [ 74.545676][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.584261][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.595328][ T5841] team0: Port device team_slave_1 added [ 74.610737][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.617959][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.650970][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.690753][ T5842] team0: Port device team_slave_0 added [ 74.697459][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.704505][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.730482][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.743008][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.750253][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.777355][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.809252][ T5842] team0: Port device team_slave_1 added [ 74.822348][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.829701][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.856267][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.869139][ T5845] team0: Port device team_slave_0 added [ 74.875399][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.882409][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.908362][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.945641][ T5845] team0: Port device team_slave_1 added [ 74.951973][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.959421][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.986177][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.997816][ T5851] Bluetooth: hci0: command tx timeout [ 74.998105][ T5856] Bluetooth: hci1: command tx timeout [ 75.004128][ T5851] Bluetooth: hci2: command tx timeout [ 75.012267][ T5856] Bluetooth: hci3: command tx timeout [ 75.017520][ T5854] Bluetooth: hci4: command tx timeout [ 75.046561][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.053622][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.080084][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.092842][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.099878][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.125875][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.178558][ T5843] hsr_slave_0: entered promiscuous mode [ 75.185153][ T5843] hsr_slave_1: entered promiscuous mode [ 75.203592][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.210640][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.237231][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.290759][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.297872][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.324290][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.348508][ T5840] hsr_slave_0: entered promiscuous mode [ 75.354976][ T5840] hsr_slave_1: entered promiscuous mode [ 75.361258][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 75.367642][ T5840] Cannot create hsr debugfs directory [ 75.387891][ T5841] hsr_slave_0: entered promiscuous mode [ 75.394158][ T5841] hsr_slave_1: entered promiscuous mode [ 75.400391][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 75.406121][ T5841] Cannot create hsr debugfs directory [ 75.441072][ T5842] hsr_slave_0: entered promiscuous mode [ 75.447430][ T5842] hsr_slave_1: entered promiscuous mode [ 75.453622][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 75.459896][ T5842] Cannot create hsr debugfs directory [ 75.585506][ T5845] hsr_slave_0: entered promiscuous mode [ 75.591916][ T5845] hsr_slave_1: entered promiscuous mode [ 75.598661][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 75.604424][ T5845] Cannot create hsr debugfs directory [ 76.004413][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.018739][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.030558][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.049431][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.103326][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.124189][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.141838][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.152621][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.240241][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.250862][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.269832][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.281186][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.381985][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.398859][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.424700][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.434875][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.493022][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.543753][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.554897][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.577505][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.588805][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.614178][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.642007][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.658313][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.665963][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.697253][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.704496][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.727396][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.771810][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.779016][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.825454][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.832616][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.853858][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.922823][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.970803][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.978280][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.009023][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.016216][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.026403][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.078331][ T5854] Bluetooth: hci3: command tx timeout [ 77.084965][ T5854] Bluetooth: hci1: command tx timeout [ 77.093470][ T5851] Bluetooth: hci0: command tx timeout [ 77.093584][ T51] Bluetooth: hci2: command tx timeout [ 77.104693][ T5856] Bluetooth: hci4: command tx timeout [ 77.161171][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.193464][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.203873][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.211075][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.242341][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.249542][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.283063][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.328413][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.335664][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.358985][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.393728][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.400973][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.486133][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.720440][ T5842] veth0_vlan: entered promiscuous mode [ 77.748706][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.805801][ T5842] veth1_vlan: entered promiscuous mode [ 77.959624][ T5841] veth0_vlan: entered promiscuous mode [ 77.975282][ T5842] veth0_macvtap: entered promiscuous mode [ 77.989329][ T5841] veth1_vlan: entered promiscuous mode [ 78.001257][ T5842] veth1_macvtap: entered promiscuous mode [ 78.018755][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.055543][ T5843] veth0_vlan: entered promiscuous mode [ 78.075028][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.089642][ T5843] veth1_vlan: entered promiscuous mode [ 78.120555][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.138207][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.160388][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.170013][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.191504][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.200691][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.222929][ T5841] veth0_macvtap: entered promiscuous mode [ 78.255034][ T5845] veth0_vlan: entered promiscuous mode [ 78.266773][ T5841] veth1_macvtap: entered promiscuous mode [ 78.293643][ T5843] veth0_macvtap: entered promiscuous mode [ 78.305293][ T5843] veth1_macvtap: entered promiscuous mode [ 78.344891][ T5845] veth1_vlan: entered promiscuous mode [ 78.352991][ T5840] veth0_vlan: entered promiscuous mode [ 78.383064][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.411346][ T5840] veth1_vlan: entered promiscuous mode [ 78.423271][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.432152][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.469340][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.477216][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.487933][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.497480][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.500392][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.522013][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.527578][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.538540][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.569541][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.578593][ T34] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.587774][ T1325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.632584][ T5845] veth0_macvtap: entered promiscuous mode [ 78.641209][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.656033][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.675371][ T5845] veth1_macvtap: entered promiscuous mode [ 78.756762][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.760982][ T5840] veth0_macvtap: entered promiscuous mode [ 78.774753][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.807205][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.812262][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.821815][ T5840] veth1_macvtap: entered promiscuous mode [ 78.855890][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.869817][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.883763][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.964728][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.985492][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.158757][ T5863] Bluetooth: hci3: command tx timeout [ 79.158759][ T5851] Bluetooth: hci4: command tx timeout [ 79.158791][ T5851] Bluetooth: hci2: command tx timeout [ 79.164938][ T51] Bluetooth: hci1: command tx timeout [ 79.182949][ T5856] Bluetooth: hci0: command tx timeout [ 79.429492][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.468718][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.740805][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.762367][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.801263][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.831400][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.841676][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.008842][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.038825][ T1325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.055255][ T1325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.115803][ T1325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.185992][ T1325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.250915][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.269180][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.787384][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.801249][ T5975] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6'. [ 80.816541][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.972220][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.042329][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.260695][ T5856] Bluetooth: hci1: command tx timeout [ 81.260708][ T51] Bluetooth: hci2: command tx timeout [ 81.260780][ T5856] Bluetooth: hci0: command tx timeout [ 81.266292][ T51] Bluetooth: hci3: command tx timeout [ 81.287388][ T5851] Bluetooth: hci4: command tx timeout [ 81.585252][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.599639][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.988572][ T5901] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.204193][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.151201][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 83.183725][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.307101][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.353320][ T5901] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 83.388446][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.464365][ T5901] usb 4-1: config 0 descriptor?? [ 83.526519][ T5856] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 84.752442][ T5901] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 84.762045][ T5901] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 84.831373][ T5901] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 84.841274][ T5901] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 84.966366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 86.581827][ T6019] mmap: syz.0.13 (6019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.605714][ T5901] ft260 0003:0403:6030.0001: failed to retrieve status: -71 [ 86.666074][ T5901] ft260 0003:0403:6030.0001: failed to reset I2C controller: -71 [ 86.839237][ T24] cfg80211: failed to load regulatory.db [ 87.546793][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 88.015202][ T6028] [U]  [ 88.175931][ T5901] usb 4-1: USB disconnect, device number 2 [ 88.945636][ T6048] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.122622][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23'. [ 91.859606][ T6085] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 91.917335][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 92.469427][ T6095] syzkaller0: entered promiscuous mode [ 92.507313][ T6095] syzkaller0: entered allmulticast mode [ 92.591185][ T6095] tipc: Started in network mode [ 92.637145][ T6095] tipc: Node identity 9e62de3f7b1f, cluster identity 4711 [ 92.715002][ T6095] tipc: Enabled bearer , priority 0 [ 92.831392][ T6094] tipc: Resetting bearer [ 92.932804][ T6094] tipc: Disabling bearer [ 93.741572][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 96.904448][ T6142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.800504][ T6142] xt_TPROXY: Can be used only with -p tcp or -p udp [ 99.411879][ T6160] syzkaller0: entered promiscuous mode [ 99.464125][ T6160] syzkaller0: entered allmulticast mode [ 99.510125][ T6163] tipc: Started in network mode [ 99.531025][ T6163] tipc: Node identity 9ab8b77a6c89, cluster identity 4711 [ 99.546476][ T808] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 99.586982][ T6163] tipc: Enabled bearer , priority 0 [ 99.656812][ T6157] tipc: Resetting bearer [ 100.243494][ T6157] tipc: Disabling bearer [ 100.257981][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.330584][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 46367, setting to 64 [ 100.802143][ T808] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 100.811291][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.824592][ T808] usb 1-1: config 0 descriptor?? [ 100.835642][ T6161] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.883211][ T808] hub 1-1:0.0: USB hub found [ 101.303400][ T808] hub 1-1:0.0: 1 port detected [ 101.510173][ T6189] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 101.822914][ T6196] dummy0: entered allmulticast mode [ 102.284951][ T6190] dummy0: left allmulticast mode [ 102.706059][ T808] usb 1-1: USB disconnect, device number 2 [ 102.712240][ T5929] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 102.914911][ T6209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.925195][ T6209] xt_TPROXY: Can be used only with -p tcp or -p udp [ 105.091278][ T6230] syz.1.60 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 106.317476][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 107.502197][ T6251] dummy0: entered allmulticast mode [ 107.809710][ T6245] dummy0: left allmulticast mode [ 108.921003][ T6262] Zero length message leads to an empty skb [ 110.049966][ T6267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.080897][ T6267] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.243763][ T6315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.272216][ T6315] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.875334][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 116.036580][ T5982] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.066433][ T808] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.200369][ T5982] usb 5-1: config 0 has no interfaces? [ 116.232644][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.299808][ T808] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.355539][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.573229][ T808] usb 3-1: config 0 descriptor?? [ 117.042050][ T808] usbhid 3-1:0.0: can't add hid device: -71 [ 117.048239][ T808] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 117.110878][ T808] usb 3-1: USB disconnect, device number 2 [ 117.267180][ T5982] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 117.281536][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.289775][ T5982] usb 5-1: Product: syz [ 117.294071][ T5982] usb 5-1: Manufacturer: syz [ 117.298844][ T5982] usb 5-1: SerialNumber: syz [ 117.325207][ T5982] usb 5-1: config 0 descriptor?? [ 117.650598][ T5982] usb 5-1: USB disconnect, device number 2 [ 119.657537][ T6373] binder: 6372:6373 ioctl 4018620d 0 returned -22 [ 120.932045][ T6377] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 121.038225][ T6390] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 121.136241][ T6377] bond1: (slave lo): Enslaving as an active interface with an up link [ 121.177508][ T6377] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 121.314127][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 121.416634][ T5982] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.761084][ T5982] usb 2-1: Using ep0 maxpacket: 16 [ 121.860353][ T5982] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 122.002896][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 122.103517][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 122.454336][ T5982] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 122.617733][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.626874][ T5982] usb 2-1: Product: syz [ 122.636592][ T5982] usb 2-1: Manufacturer: syz [ 122.641454][ T5982] usb 2-1: SerialNumber: syz [ 122.657215][ T5982] usb 2-1: config 0 descriptor?? [ 123.133432][ T5982] appledisplay 2-1:0.0: Submitting URB failed [ 123.154974][ T5982] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5 [ 123.342421][ T5982] usb 2-1: USB disconnect, device number 2 [ 123.696442][ T995] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.958297][ T995] usb 4-1: config 0 has no interfaces? [ 123.967586][ T995] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 123.980848][ T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.486525][ T995] usb 4-1: Product: syz [ 124.490766][ T995] usb 4-1: Manufacturer: syz [ 124.495474][ T995] usb 4-1: SerialNumber: syz [ 124.502118][ T995] usb 4-1: config 0 descriptor?? [ 124.765555][ T995] usb 4-1: USB disconnect, device number 3 [ 125.432239][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 127.469035][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.112'. [ 127.632015][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 128.945761][ T6454] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1717975090 (27487601440 ns) > initial count (13473571696 ns). Using initial count to start timer. [ 129.249985][ T6462] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 129.278750][ T6462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.118'. [ 129.757859][ T995] IPVS: starting estimator thread 0... [ 129.928119][ T6467] IPVS: using max 57 ests per chain, 136800 per kthread [ 130.201575][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 130.426388][ T995] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.358198][ T995] usb 3-1: config 0 has no interfaces? [ 132.365902][ T995] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 132.403019][ T995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.425417][ T995] usb 3-1: Product: syz [ 132.435450][ T995] usb 3-1: Manufacturer: syz [ 132.463442][ T995] usb 3-1: SerialNumber: syz [ 132.504876][ T995] usb 3-1: config 0 descriptor?? [ 132.739033][ T995] usb 3-1: USB disconnect, device number 3 [ 132.844144][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.852750][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.272609][ T6493] batman_adv: batadv0: Adding interface: gretap1 [ 133.279290][ T6493] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.305264][ T6493] batman_adv: batadv0: Interface activated: gretap1 [ 133.435845][ T6498] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 133.463005][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.128'. [ 133.752771][ T6503] dummy0: entered allmulticast mode [ 134.328861][ T6505] netlink: 'syz.4.129': attribute type 1 has an invalid length. [ 134.336967][ T6505] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.129'. [ 134.351131][ T6499] dummy0: left allmulticast mode [ 134.356156][ T6505] netlink: 1 bytes leftover after parsing attributes in process `syz.4.129'. [ 135.215250][ T6520] netlink: 'syz.4.135': attribute type 39 has an invalid length. [ 137.048535][ T808] IPVS: starting estimator thread 0... [ 137.146467][ T6539] IPVS: using max 28 ests per chain, 67200 per kthread [ 137.176919][ T995] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.361859][ T995] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 137.434046][ T6544] dummy0: entered allmulticast mode [ 137.900766][ T995] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 137.910120][ T995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.918222][ T995] usb 3-1: Product: syz [ 137.922492][ T995] usb 3-1: Manufacturer: syz [ 137.927433][ T995] usb 3-1: SerialNumber: syz [ 138.049225][ T6541] dummy0: left allmulticast mode [ 138.187261][ T6547] netlink: 'syz.4.144': attribute type 1 has an invalid length. [ 138.195044][ T6547] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.144'. [ 138.204979][ T6547] netlink: 1 bytes leftover after parsing attributes in process `syz.4.144'. [ 140.136412][ T10] usb 3-1: USB disconnect, device number 4 [ 140.265792][ T6571] netlink: 'syz.2.151': attribute type 39 has an invalid length. [ 140.279803][ T6572] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1647862320 (26365797120 ns) > initial count (12940895088 ns). Using initial count to start timer. [ 140.816480][ T995] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.966098][ T6585] dummy0: entered allmulticast mode [ 141.476409][ T995] usb 1-1: Using ep0 maxpacket: 32 [ 141.505556][ T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.523971][ T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.558024][ T995] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 141.579306][ T6582] dummy0: left allmulticast mode [ 141.657193][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.704346][ T995] usb 1-1: config 0 descriptor?? [ 142.126533][ T3115] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 142.173825][ T995] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 142.184782][ T995] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 142.328225][ T6605] syz.1.163 uses obsolete (PF_INET,SOCK_PACKET) [ 142.335186][ T3115] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 142.363749][ T995] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 142.366818][ T3115] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 142.398547][ T3115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.425687][ T3115] usb 5-1: Product: syz [ 142.439731][ T3115] usb 5-1: Manufacturer: syz [ 142.454595][ T3115] usb 5-1: SerialNumber: syz [ 142.576155][ T995] ft260 0003:0403:6030.0002: failed to retrieve system status [ 142.621897][ T995] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -32 [ 143.111569][ T6609] ======================================================= [ 143.111569][ T6609] WARNING: The mand mount option has been deprecated and [ 143.111569][ T6609] and is ignored by this kernel. Remove the mand [ 143.111569][ T6609] option from the mount to silence this warning. [ 143.111569][ T6609] ======================================================= [ 143.156731][ T6609] FAT-fs (nullb0): bogus number of reserved sectors [ 143.164336][ T6609] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 144.268423][ T995] usb 1-1: USB disconnect, device number 3 [ 145.400810][ T3115] usb 5-1: USB disconnect, device number 3 [ 145.620937][ T6623] tc_dump_action: action bad kind [ 146.443288][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.733600][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 146.749897][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.811416][ T10] usb 4-1: config 0 descriptor?? [ 147.158100][ T6640] dummy0: entered allmulticast mode [ 147.822922][ T6644] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 147.859175][ T6637] dummy0: left allmulticast mode [ 147.966130][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.173'. [ 148.880713][ T10] usb 4-1: USB disconnect, device number 4 [ 149.220969][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 149.468523][ T3115] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.669539][ T3115] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 149.737166][ T3115] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 149.769975][ T3115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.808661][ T3115] usb 5-1: Product: syz [ 149.841383][ T3115] usb 5-1: Manufacturer: syz [ 149.863575][ T3115] usb 5-1: SerialNumber: syz [ 150.209360][ T5851] Bluetooth: hci5: command 0x1003 tx timeout [ 150.216476][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 150.740437][ T6681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.182'. [ 151.255885][ T6697] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 151.336764][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.186'. [ 151.658043][ T6708] dummy0: entered allmulticast mode [ 151.996129][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 152.175321][ T3115] usb 5-1: USB disconnect, device number 4 [ 152.246163][ T6704] dummy0: left allmulticast mode [ 153.320055][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 153.413560][ T6730] netlink: 'syz.4.193': attribute type 1 has an invalid length. [ 153.584954][ T6739] syzkaller0: entered promiscuous mode [ 153.615728][ T6739] syzkaller0: entered allmulticast mode [ 154.346384][ T6760] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 154.500891][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.201'. [ 155.320596][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 155.388189][ T6775] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 155.395942][ T6775] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.205'. [ 155.406349][ T6775] netlink: 1 bytes leftover after parsing attributes in process `syz.2.205'. [ 155.960173][ T6782] batman_adv: batadv0: Adding interface: gretap1 [ 156.167049][ T6782] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.204466][ T6782] batman_adv: batadv0: Interface activated: gretap1 [ 158.042297][ T6805] dummy0: entered allmulticast mode [ 158.275375][ T6793] dummy0: left allmulticast mode [ 158.568311][ T995] IPVS: starting estimator thread 0... [ 158.828288][ T6814] IPVS: using max 57 ests per chain, 136800 per kthread [ 161.035819][ T6837] kAFS: No cell specified [ 162.430848][ T6876] tipc: Started in network mode [ 162.446469][ T6876] tipc: Node identity ca8515be2e62, cluster identity 4711 [ 162.466600][ T6876] tipc: Enabled bearer , priority 0 [ 162.486669][ T5929] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.564927][ T6877] syzkaller0: entered promiscuous mode [ 162.571977][ T6877] syzkaller0: entered allmulticast mode [ 162.580183][ T6877] tipc: Resetting bearer [ 162.631198][ T6879] dummy0: entered allmulticast mode [ 162.682536][ T6875] tipc: Resetting bearer [ 162.886403][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 162.898163][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 162.919022][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 162.939334][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 162.959879][ T5929] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 162.976475][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.996397][ T5929] usb 4-1: Product: syz [ 163.003088][ T5929] usb 4-1: Manufacturer: syz [ 163.009406][ T5929] usb 4-1: SerialNumber: syz [ 163.029071][ T5929] usb 4-1: config 0 descriptor?? [ 163.044586][ T5929] appledisplay 4-1:0.0: Submitting URB failed [ 163.056590][ T5929] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -5 [ 163.245652][ T5929] usb 4-1: USB disconnect, device number 5 [ 164.030088][ T6898] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 164.038087][ T6898] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.246'. [ 164.047925][ T6898] netlink: 1 bytes leftover after parsing attributes in process `syz.4.246'. [ 164.511696][ T6903] binder: 6902:6903 ioctl 4018620d 0 returned -22 [ 165.684481][ T6875] tipc: Disabling bearer [ 165.707816][ T6871] dummy0: left allmulticast mode [ 165.825056][ T5908] tipc: Node number set to 3840349630 [ 165.859061][ T6909] kAFS: No cell specified [ 166.079088][ T6904] bond1: (slave lo): Releasing backup interface [ 166.128839][ T6904] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 167.626528][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.710630][ T6904] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.719242][ T6904] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.807514][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 167.842804][ T24] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 167.892441][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.921475][ T24] usb 3-1: Product: syz [ 167.940976][ T24] usb 3-1: Manufacturer: syz [ 167.962768][ T24] usb 3-1: SerialNumber: syz [ 167.996547][ T24] usb 3-1: config 0 descriptor?? [ 168.018662][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 168.044409][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 168.060158][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 168.083359][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 168.107885][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 168.173488][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.195918][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 168.230691][ T24] usb 3-1: media controller created [ 168.283261][ T6904] bridge_slave_0: left allmulticast mode [ 168.316618][ T6904] bridge_slave_0: left promiscuous mode [ 168.341310][ T6904] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.349650][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.427671][ T24] usb 3-1: selecting invalid altsetting 3 [ 168.443006][ T6904] bridge_slave_1: left allmulticast mode [ 168.457949][ T24] ttusb2: set interface to alts=3 failed [ 168.466791][ T6904] bridge_slave_1: left promiscuous mode [ 168.481236][ T6904] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.567759][ T24] DVB: Unable to find symbol tda10086_attach() [ 168.581361][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 168.608353][ T6904] bond0: (slave bond_slave_0): Releasing backup interface [ 168.615113][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 168.640684][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 168.674377][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 168.682763][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 168.698732][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 168.822421][ T6904] bond0: (slave bond_slave_1): Releasing backup interface [ 168.833571][ T24] usb 3-1: USB disconnect, device number 5 [ 168.854502][ T6939] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 168.862443][ T6939] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.258'. [ 168.871941][ T6939] netlink: 1 bytes leftover after parsing attributes in process `syz.0.258'. [ 169.193951][ T6904] team0: Port device team_slave_0 removed [ 169.294045][ T6904] team0: Port device team_slave_1 removed [ 169.323953][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 169.329165][ T6904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.389346][ T6904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.424414][ T6904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.468731][ T6904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.593935][ T6951] kAFS: No cell specified [ 169.604540][ T6904] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.765235][ T6954] dummy0: entered allmulticast mode [ 169.873503][ T6935] dummy0: left allmulticast mode [ 171.265803][ T6969] netlink: 'syz.1.268': attribute type 2 has an invalid length. [ 171.466584][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 171.643199][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 171.668426][ T10] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.701638][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 171.712701][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.732240][ T10] usb 1-1: Product: syz [ 171.745139][ T10] usb 1-1: Manufacturer: syz [ 171.755661][ T10] usb 1-1: SerialNumber: syz [ 171.766550][ T3115] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 171.946442][ T3115] usb 2-1: Using ep0 maxpacket: 32 [ 171.957666][ T3115] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 171.983977][ T3115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.008195][ T3115] usb 2-1: Product: syz [ 172.022747][ T3115] usb 2-1: Manufacturer: syz [ 172.036708][ T3115] usb 2-1: SerialNumber: syz [ 172.068357][ T3115] usb 2-1: config 0 descriptor?? [ 172.110987][ T3115] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 172.121036][ T3115] dvb-usb: bulk message failed: -22 (4/0) [ 172.127121][ T3115] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 172.140500][ T3115] dvb-usb: bulk message failed: -22 (5/0) [ 172.148234][ T3115] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 172.210755][ T3115] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.223673][ T3115] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 172.234009][ T3115] usb 2-1: media controller created [ 172.325890][ T3115] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.623772][ T3115] usb 2-1: selecting invalid altsetting 3 [ 172.630648][ T3115] ttusb2: set interface to alts=3 failed [ 172.651691][ T6982] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 172.659951][ T6982] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.271'. [ 172.669623][ T6982] netlink: 1 bytes leftover after parsing attributes in process `syz.4.271'. [ 172.910110][ T3115] DVB: Unable to find symbol tda10086_attach() [ 172.925294][ T3115] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 172.935412][ T3115] dvb-usb: bulk message failed: -22 (4/0) [ 172.947122][ T3115] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 172.982108][ T3115] dvb-usb: bulk message failed: -22 (5/0) [ 172.990134][ T3115] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 173.002243][ T3115] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 173.094087][ T3115] usb 2-1: USB disconnect, device number 3 [ 173.278465][ T6988] binder: 6987:6988 ioctl 4018620d 0 returned -22 [ 173.318883][ T3115] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 173.735624][ T6995] kAFS: No cell specified [ 174.234087][ T808] usb 1-1: USB disconnect, device number 4 [ 174.697874][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.705328][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.745808][ T6992] bridge_slave_0: left allmulticast mode [ 175.753358][ T6992] bridge_slave_0: left promiscuous mode [ 175.761571][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.786778][ T6992] bridge_slave_1: left allmulticast mode [ 175.799943][ T6992] bridge_slave_1: left promiscuous mode [ 175.805750][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.830736][ T6992] bond0: (slave bond_slave_0): Releasing backup interface [ 175.855043][ T6992] bond0: (slave bond_slave_1): Releasing backup interface [ 175.886108][ T6992] team0: Port device team_slave_0 removed [ 175.984678][ T6992] team0: Port device team_slave_1 removed [ 176.066595][ T7017] netlink: 'syz.2.280': attribute type 2 has an invalid length. [ 176.241161][ T6992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.276027][ T6992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.409255][ T6992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.430965][ T6992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.480487][ T6992] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 176.523143][ T7012] dummy0: entered allmulticast mode [ 176.528596][ T7012] dummy0: left allmulticast mode [ 177.046902][ T7027] netlink: 'syz.0.282': attribute type 1 has an invalid length. [ 177.054757][ T7027] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.282'. [ 177.064035][ T7027] netlink: 1 bytes leftover after parsing attributes in process `syz.0.282'. [ 177.334213][ T7034] netlink: 'syz.2.286': attribute type 10 has an invalid length. [ 177.356379][ T5908] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 178.036978][ T7034] team0: Port device dummy0 added [ 178.396837][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 178.407754][ T5908] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 178.419429][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.428379][ T5908] usb 2-1: Product: syz [ 178.432677][ T5908] usb 2-1: Manufacturer: syz [ 178.440524][ T5908] usb 2-1: SerialNumber: syz [ 178.476047][ T5908] usb 2-1: config 0 descriptor?? [ 178.488167][ T5908] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 178.503878][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 178.532975][ T5908] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 178.566210][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 178.627876][ T5908] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 178.675859][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.723464][ T5908] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 178.763872][ T5908] usb 2-1: media controller created [ 179.024373][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.645600][ T5908] usb 2-1: selecting invalid altsetting 3 [ 179.656016][ T5908] ttusb2: set interface to alts=3 failed [ 179.847689][ T5908] DVB: Unable to find symbol tda10086_attach() [ 179.848580][ T7056] netlink: 'syz.2.291': attribute type 2 has an invalid length. [ 180.069859][ T5908] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 180.134142][ T5908] dvb-usb: bulk message failed: -22 (4/0) [ 180.153434][ T5908] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 180.400447][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 180.467429][ T7064] dummy0: entered allmulticast mode [ 180.920265][ T5908] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 180.950910][ T5908] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 180.994202][ T5908] usb 2-1: USB disconnect, device number 4 [ 181.079899][ T7061] dummy0: left allmulticast mode [ 181.224140][ T5908] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 181.284404][ T7070] syzkaller0: entered promiscuous mode [ 181.304499][ T7070] syzkaller0: entered allmulticast mode [ 181.996042][ T7081] netlink: 'syz.1.297': attribute type 1 has an invalid length. [ 182.004027][ T7081] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.297'. [ 182.015721][ T7081] netlink: 1 bytes leftover after parsing attributes in process `syz.1.297'. [ 182.542685][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.299'. [ 183.700651][ T7098] netlink: 'syz.3.303': attribute type 2 has an invalid length. [ 183.973738][ T5849] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 184.996412][ T5849] usb 2-1: Using ep0 maxpacket: 32 [ 185.008429][ T5849] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 185.017545][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.025546][ T5849] usb 2-1: Product: syz [ 185.030261][ T5849] usb 2-1: Manufacturer: syz [ 185.345986][ T5849] usb 2-1: SerialNumber: syz [ 185.363174][ T7106] dummy0: entered allmulticast mode [ 185.382746][ T5849] usb 2-1: config 0 descriptor?? [ 185.394293][ T5849] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 185.419899][ T5849] dvb-usb: bulk message failed: -22 (4/0) [ 185.439419][ T5849] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 185.454541][ T5849] dvb-usb: bulk message failed: -22 (5/0) [ 185.463750][ T5849] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 185.478528][ T7101] dummy0: left allmulticast mode [ 185.628319][ T5849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.639006][ T5849] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 185.658096][ T5849] usb 2-1: media controller created [ 186.064016][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.186263][ T7126] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 186.194365][ T7126] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.309'. [ 186.203664][ T7126] netlink: 1 bytes leftover after parsing attributes in process `syz.4.309'. [ 186.663680][ T5849] usb 2-1: selecting invalid altsetting 3 [ 186.699355][ T5849] ttusb2: set interface to alts=3 failed [ 187.316566][ T5849] DVB: Unable to find symbol tda10086_attach() [ 187.334609][ T5849] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 187.357560][ T5849] dvb-usb: bulk message failed: -22 (4/0) [ 187.363401][ T5849] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 187.404440][ T5849] dvb-usb: bulk message failed: -22 (5/0) [ 187.436938][ T5849] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 187.481571][ T5849] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 187.526973][ T5849] usb 2-1: USB disconnect, device number 5 [ 187.655499][ T7155] netlink: 'syz.4.317': attribute type 2 has an invalid length. [ 187.712842][ T5849] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 189.357583][ T7163] dummy0: entered allmulticast mode [ 189.363744][ T7163] dummy0: left allmulticast mode [ 191.659932][ T7206] netlink: 'syz.4.331': attribute type 2 has an invalid length. [ 193.971412][ T7234] dummy0: entered allmulticast mode [ 193.980577][ T7233] dummy0: left allmulticast mode [ 194.194018][ T9] IPVS: starting estimator thread 0... [ 194.237516][ T5851] block nbd0: Receive control failed (result -32) [ 194.250624][ T5856] block nbd0: Receive control failed (result -32) [ 194.284713][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.294617][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.301252][ T7243] IPVS: using max 33 ests per chain, 79200 per kthread [ 194.466755][ T5849] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 195.518588][ T5849] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 195.569257][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.605106][ T5849] usb 2-1: config 0 descriptor?? [ 195.727907][ T7268] netlink: 'syz.4.351': attribute type 2 has an invalid length. [ 195.831709][ T5849] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 195.854309][ T5849] [drm:udl_init] *ERROR* Selecting channel failed [ 196.010054][ T5849] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 196.070219][ T5849] [drm] Initialized udl on minor 2 [ 196.284961][ T5849] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 196.312685][ T7273] dummy0: entered allmulticast mode [ 196.313775][ T5849] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 196.330691][ T7272] dummy0: left allmulticast mode [ 196.663732][ T5161] Bluetooth: hci3: command 0x0406 tx timeout [ 196.675971][ T5161] Bluetooth: hci4: command 0x0406 tx timeout [ 196.689332][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 196.696803][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 196.961619][ T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 196.974303][ T5849] usb 2-1: USB disconnect, device number 6 [ 196.982293][ T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 197.672014][ T7286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.357'. [ 197.726963][ T7286] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 198.165784][ T5856] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 198.541086][ T7297] netlink: 'syz.1.356': attribute type 1 has an invalid length. [ 199.325384][ T7316] dummy0: entered allmulticast mode [ 199.423404][ T7313] dummy0: left allmulticast mode [ 200.016646][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 200.324609][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 200.342153][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.439846][ T5849] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 200.626492][ T5849] usb 1-1: Using ep0 maxpacket: 16 [ 200.642316][ T5849] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 200.666183][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 200.691039][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 200.725178][ T5849] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 200.742756][ T9] usb 3-1: config 0 descriptor?? [ 200.753232][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.795760][ T5849] usb 1-1: Product: syz [ 200.807644][ T5849] usb 1-1: Manufacturer: syz [ 200.824715][ T5849] usb 1-1: SerialNumber: syz [ 201.234917][ T9] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 201.244860][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 201.276093][ T5849] usb 1-1: config 0 descriptor?? [ 201.756793][ T5849] appledisplay 1-1:0.0: Submitting URB failed [ 201.763244][ T5849] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -5 [ 201.772678][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 201.809728][ T9] [drm] Initialized udl on minor 2 [ 201.858526][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 201.892771][ T7354] netlink: 'syz.4.376': attribute type 1 has an invalid length. [ 201.924508][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 201.937363][ T808] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 201.998149][ T9] usb 3-1: USB disconnect, device number 6 [ 202.007760][ T808] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 202.028953][ T808] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 202.044559][ T5849] usb 1-1: USB disconnect, device number 5 [ 204.746588][ T5849] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 205.047892][ T5849] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 205.150184][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.570473][ T5849] usb 2-1: config 0 descriptor?? [ 205.663279][ T7405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.391'. [ 205.685785][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 206.284761][ T5849] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 206.388511][ T5849] [drm:udl_init] *ERROR* Selecting channel failed [ 206.560026][ T5849] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 206.566968][ T5849] [drm] Initialized udl on minor 2 [ 206.596591][ T5849] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 206.613597][ T5849] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 206.621926][ T5901] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 206.685262][ T5901] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 206.697578][ T5849] usb 2-1: USB disconnect, device number 7 [ 206.721730][ T5901] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 207.746669][ T7427] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 209.056064][ T7448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.403'. [ 209.896414][ T5849] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 210.051819][ T5849] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 210.073560][ T5849] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 210.105023][ T5849] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 210.127721][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.150678][ T5849] usb 2-1: Product: syz [ 210.162337][ T5849] usb 2-1: Manufacturer: syz [ 210.171033][ T5849] usb 2-1: SerialNumber: syz [ 210.188761][ T5849] usb 2-1: config 0 descriptor?? [ 211.454268][ T7480] netlink: 'syz.3.412': attribute type 1 has an invalid length. [ 211.940641][ T5901] usb 2-1: USB disconnect, device number 8 [ 212.852355][ T7492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.415'. [ 213.199668][ T7498] FAT-fs (nullb0): bogus number of reserved sectors [ 213.206355][ T7498] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 213.914050][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 214.336137][ T7507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.431268][ T7510] Device name cannot be null; rc = [-22] [ 216.464627][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.430'. [ 216.511007][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 217.669068][ T7541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.431'. [ 218.706780][ T7559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.493830][ T7559] Device name cannot be null; rc = [-22] [ 221.397050][ T7590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.443'. [ 221.428206][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 222.187730][ T7599] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 222.747897][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.446'. [ 222.816381][ T808] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 223.981753][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.999006][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 46367, setting to 64 [ 224.011477][ T808] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 224.038160][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.063099][ T808] usb 1-1: config 0 descriptor?? [ 224.073853][ T7593] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.092551][ T808] hub 1-1:0.0: USB hub found [ 224.298711][ T808] hub 1-1:0.0: 1 port detected [ 225.446191][ T7638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.456'. [ 225.500169][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'. [ 225.788947][ T5929] usb 1-1: USB disconnect, device number 6 [ 226.508361][ T7642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.458'. [ 228.156064][ T808] IPVS: starting estimator thread 0... [ 228.453857][ T7653] bridge0: port 3(erspan0) entered blocking state [ 228.463197][ T7653] bridge0: port 3(erspan0) entered disabled state [ 228.475630][ T7653] erspan0: entered allmulticast mode [ 228.507779][ T7653] erspan0: entered promiscuous mode [ 228.516870][ T7653] bridge0: port 3(erspan0) entered blocking state [ 228.523729][ T7653] bridge0: port 3(erspan0) entered forwarding state [ 228.556981][ T7655] IPVS: using max 35 ests per chain, 84000 per kthread [ 229.836756][ T808] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 230.016081][ T7672] netlink: 28 bytes leftover after parsing attributes in process `syz.2.469'. [ 230.039159][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 230.744483][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.822182][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 46367, setting to 64 [ 230.833553][ T808] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 230.844336][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.878109][ T808] usb 2-1: config 0 descriptor?? [ 230.888518][ T7669] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 230.921556][ T808] hub 2-1:0.0: USB hub found [ 231.553843][ T808] hub 2-1:0.0: 1 port detected [ 233.322404][ T808] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 233.486956][ T808] usb 2-1: USB disconnect, device number 9 [ 234.352787][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 234.713966][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.481'. [ 234.913537][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 238.016502][ T808] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 238.242431][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.281770][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 46367, setting to 64 [ 238.317901][ T808] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 238.356598][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.382893][ T808] usb 2-1: config 0 descriptor?? [ 238.407124][ T7719] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.430089][ T808] hub 2-1:0.0: USB hub found [ 238.445914][ T7738] netlink: 'syz.0.491': attribute type 2 has an invalid length. [ 238.648189][ T808] hub 2-1:0.0: 1 port detected [ 240.186289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 240.216288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 240.265442][ T995] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 240.274980][ T808] usb 2-1: USB disconnect, device number 10 [ 241.009554][ T7760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.496'. [ 242.177697][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 242.274329][ T7780] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 242.282383][ T7780] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.503'. [ 242.291658][ T7780] netlink: 1 bytes leftover after parsing attributes in process `syz.0.503'. [ 243.045533][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.505'. [ 244.185457][ T7798] netlink: 'syz.0.507': attribute type 2 has an invalid length. [ 244.410782][ T995] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 244.649784][ T7803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'. [ 244.970732][ T7804] syzkaller0: entered promiscuous mode [ 244.976488][ T7804] syzkaller0: entered allmulticast mode [ 245.018193][ T995] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 5292, setting to 1024 [ 245.029998][ T995] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 245.080244][ T995] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.122697][ T995] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 245.134122][ T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.156027][ T995] usb 4-1: Product: syz [ 245.197729][ T995] usb 4-1: Manufacturer: syz [ 245.213574][ T995] usb 4-1: SerialNumber: syz [ 245.326119][ T7794] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.453678][ T995] usblp0: Disabling reads from problematic bidirectional printer [ 245.596125][ T995] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 245.643611][ T995] usb 4-1: USB disconnect, device number 6 [ 245.717597][ T995] usblp0: removed [ 245.988786][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 246.296872][ T7823] netlink: 'syz.2.515': attribute type 1 has an invalid length. [ 246.305076][ T7823] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.515'. [ 246.314828][ T7823] netlink: 1 bytes leftover after parsing attributes in process `syz.2.515'. [ 246.841502][ T7832] netlink: 'syz.3.518': attribute type 2 has an invalid length. [ 247.640868][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.519'. [ 247.965222][ T7839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.520'. [ 248.686968][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 248.848030][ T7866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.863356][ T5901] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 248.945693][ T7866] xt_TPROXY: Can be used only with -p tcp or -p udp [ 249.102953][ T7873] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 249.111219][ T7873] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.530'. [ 249.616023][ T7873] netlink: 1 bytes leftover after parsing attributes in process `syz.3.530'. [ 249.772158][ T5901] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 249.884340][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.112414][ T5901] usb 5-1: config 0 descriptor?? [ 250.205504][ T7886] netlink: 'syz.0.532': attribute type 2 has an invalid length. [ 250.676349][ T5901] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 250.752461][ T5901] [drm:udl_init] *ERROR* Selecting channel failed [ 251.034528][ T5901] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 251.039877][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.538'. [ 251.145292][ T5901] [drm] Initialized udl on minor 2 [ 251.199966][ T5901] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 251.275004][ T5901] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 251.319181][ T3115] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 251.339234][ T5901] usb 5-1: USB disconnect, device number 5 [ 251.370881][ T3115] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 252.651979][ T7918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.689010][ T7918] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.671492][ T5901] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 253.836420][ T5901] usb 3-1: device descriptor read/64, error -71 [ 254.213400][ T7938] dummy0: entered allmulticast mode [ 254.322841][ T7926] dummy0: left allmulticast mode [ 254.499017][ T5901] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 254.656380][ T5901] usb 3-1: device descriptor read/64, error -71 [ 254.776755][ T5901] usb usb3-port1: attempt power cycle [ 255.166467][ T5901] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 255.985805][ T7957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.159186][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.168180][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.175167][ T5901] usb 3-1: device descriptor read/8, error -71 [ 256.416564][ T7957] xt_TPROXY: Can be used only with -p tcp or -p udp [ 258.132719][ T7978] dummy0: entered allmulticast mode [ 258.704561][ T7973] dummy0: left allmulticast mode [ 258.942624][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'. [ 259.063452][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.565'. [ 259.606371][ T5908] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 259.809064][ T5908] usb 4-1: device descriptor read/64, error -71 [ 259.866969][ T8003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.903824][ T8003] xt_TPROXY: Can be used only with -p tcp or -p udp [ 260.360015][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.571'. [ 260.372620][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 260.606361][ T5908] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 260.972788][ T8017] dummy0: entered allmulticast mode [ 261.444809][ T5908] usb 4-1: device descriptor read/64, error -71 [ 261.503023][ T8010] dummy0: left allmulticast mode [ 262.716522][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 262.894533][ T9] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 262.914261][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 262.946707][ T5908] usb usb4-port1: attempt power cycle [ 262.975696][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 263.018665][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.071816][ T9] usb 2-1: Product: syz [ 263.100612][ T9] usb 2-1: Manufacturer: syz [ 263.113143][ T9] usb 2-1: SerialNumber: syz [ 263.164282][ T9] usb 2-1: config 0 descriptor?? [ 263.192908][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 263.306723][ T5908] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 263.450240][ T5908] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 5292, setting to 1024 [ 263.971360][ T5908] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 263.981514][ T5908] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.000740][ T5908] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 264.010115][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.018524][ T5908] usb 4-1: Product: syz [ 264.022862][ T5908] usb 4-1: Manufacturer: syz [ 264.027656][ T5908] usb 4-1: SerialNumber: syz [ 264.058158][ T8025] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 264.077802][ T5908] usblp0: Disabling reads from problematic bidirectional printer [ 264.294936][ T5908] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 264.481464][ T9] usb 4-1: USB disconnect, device number 9 [ 264.493091][ T9] usblp0: removed [ 265.077596][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 265.269663][ T24] usb 2-1: USB disconnect, device number 11 [ 265.392021][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.439200][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 46367, setting to 64 [ 265.472636][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 265.758924][ T8058] dummy0: entered allmulticast mode [ 266.370679][ T8051] dummy0: left allmulticast mode [ 266.440076][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.452396][ T9] usb 3-1: config 0 descriptor?? [ 266.686321][ T8046] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 266.757967][ T9] hub 3-1:0.0: USB hub found [ 266.962884][ T9] hub 3-1:0.0: 1 port detected [ 268.039708][ T5856] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 268.402223][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 268.424201][ T9] usb 3-1: USB disconnect, device number 11 [ 268.438125][ T201] usb 3-1: Failed to suspend device, error -71 [ 268.608556][ T8083] dummy0: entered allmulticast mode [ 268.674957][ T8085] netlink: 'syz.3.597': attribute type 39 has an invalid length. [ 268.699197][ T8086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.596'. [ 268.928695][ T8065] dummy0: left allmulticast mode [ 270.094622][ T8105] dummy0: entered allmulticast mode [ 270.876553][ T8096] dummy0: left allmulticast mode [ 271.704979][ T5856] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 272.176382][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 272.341141][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 272.369761][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 46367, setting to 64 [ 272.394832][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 272.412780][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.441001][ T9] usb 3-1: config 0 descriptor?? [ 272.459519][ T8113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 272.486507][ T9] hub 3-1:0.0: USB hub found [ 272.699277][ T9] hub 3-1:0.0: 1 port detected [ 273.734932][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.611'. [ 274.773620][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 274.774846][ T24] usb 3-1: USB disconnect, device number 12 [ 276.184261][ T5856] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 276.307975][ T8137] dummy0: entered allmulticast mode [ 276.522584][ T8134] dummy0: left allmulticast mode [ 276.838931][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.625'. [ 278.506139][ T5856] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 281.476536][ T8232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.641'. [ 281.956595][ T5851] Bluetooth: hci5: command 0x1003 tx timeout [ 281.959297][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 282.552580][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.645'. [ 282.591978][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 282.904177][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 282.999682][ T8246] netlink: 'syz.1.648': attribute type 39 has an invalid length. [ 283.161091][ T8248] dummy0: entered allmulticast mode [ 283.402161][ T8238] dummy0: left allmulticast mode [ 284.329338][ T8254] netlink: 'syz.3.650': attribute type 2 has an invalid length. [ 286.797439][ T8268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.654'. [ 289.813121][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.662'. [ 289.836661][ T8296] openvswitch: netlink: Flow actions attr not present in new flow. [ 290.116943][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 290.912136][ T8311] dummy0: entered allmulticast mode [ 291.788760][ T8303] dummy0: left allmulticast mode [ 293.984636][ T8320] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 294.111134][ T8320] bond3: entered promiscuous mode [ 294.185317][ T8320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 294.384455][ T8323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 294.400931][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 294.436194][ T8323] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 294.502803][ T8323] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 294.584884][ T8323] bond3: (slave ip6gre1): making interface the new active one [ 294.617611][ T8323] ip6gre1: entered promiscuous mode [ 294.631396][ T8323] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 295.079585][ T8347] xt_TPROXY: Can be used only with -p tcp or -p udp [ 296.006681][ T995] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 296.683235][ T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.733586][ T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 46367, setting to 64 [ 296.775867][ T995] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 296.805520][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.834941][ T995] usb 1-1: config 0 descriptor?? [ 296.936868][ T8348] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 296.963041][ T995] hub 1-1:0.0: USB hub found [ 297.151255][ T8363] syzkaller0: entered promiscuous mode [ 297.175864][ T8363] 0: reclassify loop, rule prio 0, protocol 800 [ 297.193500][ T995] hub 1-1:0.0: 1 port detected [ 298.104633][ T8373] dummy0: entered allmulticast mode [ 298.476733][ T8377] Illegal XDP return value 4294967294 on prog (id 40) dev syz_tun, expect packet loss! [ 298.592884][ T995] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 298.601200][ T24] usb 1-1: USB disconnect, device number 7 [ 298.693006][ T8368] dummy0: left allmulticast mode [ 298.876130][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 298.963989][ T8383] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.926545][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 301.178705][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 5292, setting to 1024 [ 301.211979][ T9] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 301.259463][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.339945][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 301.382747][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.409158][ T9] usb 4-1: Product: syz [ 301.421760][ T9] usb 4-1: Manufacturer: syz [ 301.436494][ T9] usb 4-1: SerialNumber: syz [ 301.459484][ T8394] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 301.489672][ T9] usblp0: Disabling reads from problematic bidirectional printer [ 301.530866][ T8413] tipc: Enabling of bearer rejected, failed to enable media [ 301.710497][ T9] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 301.899617][ T9] usb 4-1: USB disconnect, device number 10 [ 301.929623][ T9] usblp0: removed [ 302.003802][ T8426] xt_TPROXY: Can be used only with -p tcp or -p udp [ 303.646353][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 305.001311][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.051506][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 46367, setting to 64 [ 305.085421][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 305.117529][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.160167][ T9] usb 4-1: config 0 descriptor?? [ 305.181048][ T8439] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.213452][ T9] hub 4-1:0.0: USB hub found [ 305.469839][ T9] hub 4-1:0.0: 1 port detected [ 305.614146][ T8458] dummy0: entered allmulticast mode [ 306.150822][ T8451] dummy0: left allmulticast mode [ 307.001192][ T5908] usb 4-1: USB disconnect, device number 11 [ 307.003049][ T9] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 307.111730][ T8472] xt_TPROXY: Can be used only with -p tcp or -p udp [ 310.026446][ T8464] lec:lec_atm_close: lec0: Shut down! [ 310.306453][ T8499] netlink: 'syz.1.723': attribute type 10 has an invalid length. [ 310.361591][ T8499] netlink: 228 bytes leftover after parsing attributes in process `syz.1.723'. [ 310.660257][ T8505] dummy0: entered allmulticast mode [ 310.671704][ T8503] dummy0: left allmulticast mode [ 314.638852][ T8552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.736'. [ 314.695046][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 315.188515][ T808] lec:lec_start_xmit: lec0:No lecd attached [ 317.608220][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.614741][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.787630][ T8597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.747'. [ 317.796769][ T8597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.747'. [ 317.821712][ T8597] dummy0: entered promiscuous mode [ 317.833545][ T8597] team0: entered promiscuous mode [ 317.852970][ T8597] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 317.876455][ T8597] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 320.356287][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms [ 320.364807][ C0] lec:lec_tx_timeout: lec0 [ 320.371119][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 321.238004][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 321.238017][ T5863] Bluetooth: hci5: command 0x1003 tx timeout [ 324.300834][ T8656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.762'. [ 326.116252][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 326.124371][ C0] lec:lec_tx_timeout: lec0 [ 326.133881][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 328.234048][ T8696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.774'. [ 328.780250][ T8699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.775'. [ 329.855905][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 330.315794][ T8709] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 331.788534][ T8714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.780'. [ 331.876255][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 331.884337][ C0] lec:lec_tx_timeout: lec0 [ 331.889200][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 332.497437][ T8739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.773'. [ 333.717768][ T8762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.789'. [ 334.098905][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 334.951030][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'. [ 335.031183][ T8773] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 335.038973][ T8773] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.791'. [ 335.048078][ T8773] netlink: 1 bytes leftover after parsing attributes in process `syz.0.791'. [ 336.916306][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 336.924362][ C0] lec:lec_tx_timeout: lec0 [ 336.929983][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 336.944848][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.796'. [ 338.519132][ T8813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.797'. [ 340.037487][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 340.837280][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 341.082624][ T8830] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 341.090335][ T8830] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.803'. [ 341.099409][ T8830] netlink: 1 bytes leftover after parsing attributes in process `syz.0.803'. [ 341.936283][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 341.944420][ C0] lec:lec_tx_timeout: lec0 [ 341.956509][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 342.654528][ T8838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.807'. [ 343.005778][ T8846] netlink: 'syz.3.810': attribute type 39 has an invalid length. [ 343.414713][ T8859] netlink: 44 bytes leftover after parsing attributes in process `syz.3.812'. [ 343.999397][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 344.043406][ T8865] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 344.051643][ T8865] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.815'. [ 344.060741][ T8865] netlink: 1 bytes leftover after parsing attributes in process `syz.3.815'. [ 345.458595][ T8887] netlink: 'syz.2.821': attribute type 39 has an invalid length. [ 346.904650][ T8921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.833'. [ 346.959563][ T8923] netlink: 'syz.1.834': attribute type 39 has an invalid length. [ 346.966297][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 346.976674][ C0] lec:lec_tx_timeout: lec0 [ 346.981321][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 347.069494][ T8928] syzkaller0: entered promiscuous mode [ 347.126529][ T8928] syzkaller0: entered allmulticast mode [ 348.851588][ T8948] netlink: 'syz.1.842': attribute type 1 has an invalid length. [ 348.920658][ T8948] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.934222][ T8948] bond3: (slave bond4): making interface the new active one [ 348.944591][ T8948] bond3: (slave bond4): Enslaving as an active interface with an up link [ 348.957299][ T8948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.842'. [ 349.015079][ T8957] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 350.024339][ T8970] netlink: 'syz.3.848': attribute type 39 has an invalid length. [ 350.119076][ T8972] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 350.238804][ T8973] dummy0: entered allmulticast mode [ 350.316524][ T8975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.849'. [ 350.776895][ T8964] dummy0: left allmulticast mode [ 351.996293][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 352.004615][ C0] lec:lec_tx_timeout: lec0 [ 352.009824][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 352.150909][ T8994] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 352.347922][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.855'. [ 353.271884][ T9009] netlink: 'syz.3.859': attribute type 39 has an invalid length. [ 353.311747][ T9000] 8021q: adding VLAN 0 to HW filter on device bond6 [ 353.321390][ T9000] bond5: (slave bond6): making interface the new active one [ 353.327024][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 353.337236][ T9000] bond5: (slave bond6): Enslaving as an active interface with an up link [ 354.027593][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 354.043945][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 46367, setting to 64 [ 354.078189][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 354.087778][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.861'. [ 354.098994][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.138637][ T9] usb 3-1: config 0 descriptor?? [ 354.156005][ T9004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 354.182992][ T9] hub 3-1:0.0: USB hub found [ 354.396553][ T9] hub 3-1:0.0: 1 port detected [ 356.137815][ T9050] netlink: 'syz.0.870': attribute type 1 has an invalid length. [ 356.255274][ T9054] netlink: 'syz.4.871': attribute type 39 has an invalid length. [ 356.402146][ T5929] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 356.411290][ T808] usb 3-1: USB disconnect, device number 13 [ 357.016248][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 357.025743][ C0] lec:lec_tx_timeout: lec0 [ 357.030414][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 357.052026][ T9052] 8021q: adding VLAN 0 to HW filter on device bond5 [ 357.069644][ T9052] bond4: (slave bond5): making interface the new active one [ 357.088272][ T9052] bond4: (slave bond5): Enslaving as an active interface with an up link [ 357.951795][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 358.087083][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'. [ 358.784990][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 359.854533][ T9097] syzkaller0: entered promiscuous mode [ 359.892689][ T9097] syzkaller0: entered allmulticast mode [ 360.170436][ T9107] netlink: 'syz.2.884': attribute type 39 has an invalid length. [ 360.730293][ T9108] can: request_module (can-proto-3) failed. [ 362.046361][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 362.054742][ C0] lec:lec_tx_timeout: lec0 [ 362.059590][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 362.585179][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'. [ 362.856767][ T9155] netlink: 'syz.4.897': attribute type 39 has an invalid length. [ 363.685050][ T9161] netlink: 324 bytes leftover after parsing attributes in process `syz.1.898'. [ 363.842805][ T9164] syzkaller0: entered promiscuous mode [ 363.873107][ T9164] syzkaller0: entered allmulticast mode [ 366.873004][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'. [ 367.066247][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 367.074405][ C0] lec:lec_tx_timeout: lec0 [ 367.083155][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 367.163181][ T9213] netlink: 'syz.1.912': attribute type 39 has an invalid length. [ 367.452241][ T9218] netlink: 324 bytes leftover after parsing attributes in process `syz.0.913'. [ 369.048529][ T9236] syzkaller1: entered promiscuous mode [ 369.079783][ T9242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.921'. [ 369.107587][ T9236] syzkaller1: entered allmulticast mode [ 370.626619][ T9255] netlink: 'syz.2.925': attribute type 39 has an invalid length. [ 370.775470][ T9252] "syz.3.924" (9252) uses obsolete ecb(arc4) skcipher [ 372.745906][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 372.916254][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 372.924515][ C0] lec:lec_tx_timeout: lec0 [ 372.930542][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 373.465083][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.935'. [ 374.421206][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 376.964282][ T9341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.949'. [ 377.806351][ T5929] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 377.946271][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 377.954324][ C0] lec:lec_tx_timeout: lec0 [ 377.959801][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 378.046632][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 378.150630][ T5929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 378.282391][ T5929] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 378.318996][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 378.355762][ T5929] usb 1-1: Product: syz [ 378.372047][ T5929] usb 1-1: Manufacturer: syz [ 378.387042][ T5929] usb 1-1: SerialNumber: syz [ 378.402266][ T5929] usb 1-1: config 0 descriptor?? [ 378.457453][ T9356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 378.603360][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.615683][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.256920][ T5929] hub 1-1:0.0: bad descriptor, ignoring hub [ 379.828305][ T5929] hub 1-1:0.0: probe with driver hub failed with error -5 [ 380.004290][ T9386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.962'. [ 380.074344][ T9385] syzkaller0: entered promiscuous mode [ 380.185572][ T9385] syzkaller0: entered allmulticast mode [ 382.966415][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 382.974703][ C0] lec:lec_tx_timeout: lec0 [ 382.980059][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 383.144059][ T5908] usb 1-1: USB disconnect, device number 8 [ 383.706071][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 383.730189][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.977'. [ 383.769656][ T9444] netlink: 312 bytes leftover after parsing attributes in process `syz.0.983'. [ 384.336339][ T5908] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 385.162254][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 385.842705][ T5908] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 385.854692][ T5908] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 385.864084][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 385.872637][ T5908] usb 1-1: Product: syz [ 385.877416][ T5908] usb 1-1: Manufacturer: syz [ 385.882147][ T5908] usb 1-1: SerialNumber: syz [ 385.892867][ T5908] usb 1-1: config 0 descriptor?? [ 385.904189][ T9451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 385.915766][ T5908] hub 1-1:0.0: bad descriptor, ignoring hub [ 385.923302][ T5908] hub 1-1:0.0: probe with driver hub failed with error -5 [ 386.666658][ T9481] syzkaller0: entered promiscuous mode [ 386.686803][ T9481] syzkaller0: entered allmulticast mode [ 386.738887][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'. [ 386.894097][ T9488] netlink: 312 bytes leftover after parsing attributes in process `syz.3.996'. [ 387.129375][ T9500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.999'. [ 387.249654][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 387.260485][ T9506] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 387.986248][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 387.994411][ C0] lec:lec_tx_timeout: lec0 [ 387.999598][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 388.374271][ T9520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1007'. [ 388.547030][ T24] usb 1-1: USB disconnect, device number 9 [ 389.095443][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'. [ 389.322885][ T9535] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1011'. [ 389.379279][ T9537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1012'. [ 389.611504][ T9546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1016'. [ 390.416351][ T5929] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 390.417074][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 390.938365][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 391.467808][ T5929] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 391.483639][ T5929] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 391.499481][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 391.510161][ T5929] usb 5-1: Product: syz [ 391.514719][ T5929] usb 5-1: Manufacturer: syz [ 391.519454][ T5929] usb 5-1: SerialNumber: syz [ 391.520556][ T9572] tipc: Enabling of bearer rejected, failed to enable media [ 391.527150][ T5929] usb 5-1: config 0 descriptor?? [ 391.555755][ T9551] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 391.567926][ T5929] hub 5-1:0.0: bad descriptor, ignoring hub [ 391.574412][ T5929] hub 5-1:0.0: probe with driver hub failed with error -5 [ 392.914373][ T9586] __nla_validate_parse: 1 callbacks suppressed [ 392.914420][ T9586] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1028'. [ 392.956947][ T9587] netlink: 'syz.3.1029': attribute type 39 has an invalid length. [ 393.006232][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 393.014303][ C0] lec:lec_tx_timeout: lec0 [ 393.019216][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 393.184906][ T9582] syzkaller0: entered promiscuous mode [ 393.194209][ T9582] syzkaller0: entered allmulticast mode [ 394.829115][ T24] usb 5-1: USB disconnect, device number 6 [ 394.850513][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1036'. [ 395.055153][ T9620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 398.026410][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 398.034451][ C0] lec:lec_tx_timeout: lec0 [ 398.039083][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 398.556532][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 400.044336][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1048'. [ 400.481133][ T5929] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 401.436876][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 401.452803][ T9668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1051'. [ 401.479581][ T5929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 401.499811][ T5929] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 401.512030][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 401.544656][ T5929] usb 1-1: Product: syz [ 401.561377][ T5929] usb 1-1: Manufacturer: syz [ 401.583028][ T5929] usb 1-1: SerialNumber: syz [ 401.611096][ T5929] usb 1-1: config 0 descriptor?? [ 401.642814][ T9657] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 401.660660][ T5929] hub 1-1:0.0: bad descriptor, ignoring hub [ 401.684769][ T5929] hub 1-1:0.0: probe with driver hub failed with error -5 [ 401.888469][ T5929] usb 1-1: USB disconnect, device number 10 [ 403.046241][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 403.054255][ C0] lec:lec_tx_timeout: lec0 [ 403.066345][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 403.436113][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 405.326623][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1063'. [ 405.474187][ T9730] syzkaller0: entered promiscuous mode [ 405.487141][ T9730] syzkaller0: entered allmulticast mode [ 405.499521][ T9731] Device name cannot be null; rc = [-22] [ 407.066316][ T9739] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 408.076328][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 408.084533][ C0] lec:lec_tx_timeout: lec0 [ 408.089136][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 409.183373][ T9757] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 409.191619][ T9757] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1076'. [ 409.201502][ T9757] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1076'. [ 409.655991][ T9769] Device name cannot be null; rc = [-22] [ 409.670977][ T9767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'. [ 411.395918][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1072'. [ 413.070939][ T9798] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 413.085185][ T9798] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.1089'. [ 413.116482][ T9798] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1089'. [ 413.867936][ T9801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1090'. [ 413.876251][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 413.885129][ C0] lec:lec_tx_timeout: lec0 [ 413.889861][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 415.553785][ T9808] syzkaller0: entered promiscuous mode [ 415.577501][ T9816] Device name cannot be null; rc = [-22] [ 415.628350][ T9808] syzkaller0: entered allmulticast mode [ 415.812537][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 415.918599][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 415.993189][ T9825] syzkaller0: entered promiscuous mode [ 416.025503][ T9825] syzkaller0: entered allmulticast mode [ 418.920370][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 418.928648][ C0] lec:lec_tx_timeout: lec0 [ 418.933661][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 419.388939][ T9863] Device name cannot be null; rc = [-22] [ 421.224718][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 421.289587][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1111'. [ 421.493957][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 421.838224][ T9904] netlink: 'syz.4.1117': attribute type 1 has an invalid length. [ 421.861963][ T9904] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1117'. [ 421.907916][ T9904] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1117'. [ 423.946224][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 423.954555][ C0] lec:lec_tx_timeout: lec0 [ 423.959459][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 424.194736][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1126'. [ 424.243395][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'. [ 425.128860][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 425.615070][ T9958] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 425.623697][ T9958] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1133'. [ 425.633256][ T9958] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1133'. [ 426.907035][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1137'. [ 426.962940][ T9968] syzkaller0: entered promiscuous mode [ 426.970098][ T9968] syzkaller0: entered allmulticast mode [ 427.793641][ T9983] FAT-fs (nullb0): bogus number of reserved sectors [ 427.806410][ T9983] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 428.236123][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 428.389358][ T9997] netlink: 'syz.0.1148': attribute type 1 has an invalid length. [ 428.397565][ T9997] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.1148'. [ 428.407426][ T9997] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1148'. [ 428.716640][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 428.944846][T10006] syzkaller0: entered promiscuous mode [ 428.959475][T10006] syzkaller0: entered allmulticast mode [ 428.966255][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 428.974294][ C0] lec:lec_tx_timeout: lec0 [ 428.978924][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 431.442950][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'. [ 431.699928][T10045] netlink: 'syz.4.1162': attribute type 1 has an invalid length. [ 431.708497][T10045] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1162'. [ 431.718426][T10045] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1162'. [ 431.950758][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 432.151012][T10048] Bluetooth: MGMT ver 1.23 [ 432.403305][T10058] syzkaller0: entered promiscuous mode [ 432.422150][T10058] syzkaller0: entered allmulticast mode [ 433.863980][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 433.986218][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 433.994327][ C0] lec:lec_tx_timeout: lec0 [ 433.998979][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 434.078339][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 434.301967][T10084] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 434.310317][T10084] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.1176'. [ 434.320054][T10084] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1176'. [ 435.498456][T10093] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1179'. [ 436.269827][T10102] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1181'. [ 437.860828][T10111] syzkaller0: entered promiscuous mode [ 437.867219][T10111] syzkaller0: entered allmulticast mode [ 438.688449][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 439.006226][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 439.013004][T10137] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1192'. [ 439.014337][ C0] lec:lec_tx_timeout: lec0 [ 439.036428][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 439.643387][T10133] netlink: 'syz.3.1191': attribute type 1 has an invalid length. [ 439.651681][T10133] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.1191'. [ 439.661409][T10133] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1191'. [ 440.570807][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.583821][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.611534][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1195'. [ 440.625164][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 441.579442][T10157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1199'. [ 441.703531][T10159] syzkaller0: entered promiscuous mode [ 441.807081][T10159] syzkaller0: entered allmulticast mode [ 443.239680][T10180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1206'. [ 443.845883][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'. [ 444.046219][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 444.054364][ C0] lec:lec_tx_timeout: lec0 [ 444.059545][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 444.402161][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 444.425076][T10191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1210'. [ 444.966085][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 445.043696][T10193] netlink: 'syz.4.1209': attribute type 1 has an invalid length. [ 445.051953][T10193] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1209'. [ 445.067458][T10193] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1209'. [ 445.226894][T10200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1213'. [ 446.403482][T10226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1219'. [ 447.317857][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1222'. [ 447.343683][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1222'. [ 448.122850][T10247] syzkaller0: entered promiscuous mode [ 448.139434][T10247] syzkaller0: entered allmulticast mode [ 449.019690][T10264] __nla_validate_parse: 3 callbacks suppressed [ 449.019724][T10264] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1233'. [ 449.066209][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 449.074226][ C0] lec:lec_tx_timeout: lec0 [ 449.086275][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 449.827381][T10265] bridge0: port 1(erspan0) entered blocking state [ 449.850434][T10265] bridge0: port 1(erspan0) entered disabled state [ 449.877618][T10265] erspan0: entered allmulticast mode [ 449.913212][T10271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1236'. [ 449.999330][T10265] erspan0: entered promiscuous mode [ 450.046717][T10274] netlink: 'syz.3.1234': attribute type 1 has an invalid length. [ 450.054721][T10274] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.1234'. [ 450.064958][T10274] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1234'. [ 450.318846][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 450.598762][T10282] netlink: 'syz.0.1239': attribute type 39 has an invalid length. [ 451.011204][T10278] syzkaller0: entered promiscuous mode [ 451.026628][T10278] syzkaller0: entered allmulticast mode [ 451.133863][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1243'. [ 451.573973][T10305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1245'. [ 454.429821][T10317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1249'. [ 454.451102][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 454.663440][T10322] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 454.672016][T10322] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.1251'. [ 454.682563][T10322] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1251'. [ 454.916195][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 454.924359][ C0] lec:lec_tx_timeout: lec0 [ 454.929324][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 455.438754][T10314] bridge0: port 1(erspan0) entered blocking state [ 455.445259][T10314] bridge0: port 1(erspan0) entered disabled state [ 455.451910][T10314] erspan0: entered allmulticast mode [ 455.458634][T10314] erspan0: entered promiscuous mode [ 455.477734][T10329] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1254'. [ 456.082263][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1256'. [ 456.657782][T10351] netlink: 'syz.1.1261': attribute type 39 has an invalid length. [ 456.728658][T10354] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1258'. [ 457.246412][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1262'. [ 457.344665][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1264'. [ 458.170229][T10365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1265'. [ 458.285311][T10367] netlink: 'syz.4.1264': attribute type 1 has an invalid length. [ 459.936203][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 459.944263][ C0] lec:lec_tx_timeout: lec0 [ 459.949948][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 460.131458][T10395] netlink: 'syz.3.1275': attribute type 39 has an invalid length. [ 460.220810][T10400] __nla_validate_parse: 5 callbacks suppressed [ 460.220888][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 460.491569][T10408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1280'. [ 460.519059][T10408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1280'. [ 460.553052][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'. [ 460.716724][T10411] netlink: 'syz.3.1281': attribute type 1 has an invalid length. [ 460.724632][T10411] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.1281'. [ 460.734410][T10411] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1281'. [ 461.308704][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 462.794468][T10438] netlink: 'syz.2.1289': attribute type 39 has an invalid length. [ 462.829222][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'. [ 463.085280][T10446] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1287'. [ 464.271944][T10458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1295'. [ 464.801275][T10469] bond6: entered promiscuous mode [ 464.825726][T10469] 8021q: adding VLAN 0 to HW filter on device bond6 [ 464.956223][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 464.964294][ C0] lec:lec_tx_timeout: lec0 [ 464.969726][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 465.386775][T10481] __nla_validate_parse: 3 callbacks suppressed [ 465.386793][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 465.393458][T10480] netlink: 'syz.3.1301': attribute type 39 has an invalid length. [ 465.830783][T10499] netlink: 'syz.3.1308': attribute type 1 has an invalid length. [ 466.058464][T10503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1310'. [ 466.068755][T10503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1310'. [ 466.994381][T10510] bond7: entered promiscuous mode [ 467.031824][T10510] 8021q: adding VLAN 0 to HW filter on device bond7 [ 467.623168][T10524] netlink: 'syz.2.1317': attribute type 39 has an invalid length. [ 467.901628][T10534] tipc: Failed to remove unknown binding: 66,0,0/0:1648952519/1648952520 [ 467.913879][T10534] tipc: Failed to remove unknown binding: 66,0,0/0:1648952519/1648952520 [ 467.925235][T10534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1322'. [ 468.075389][T10536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1321'. [ 468.087856][T10536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1321'. [ 468.143640][T10540] syzkaller0: entered promiscuous mode [ 468.158757][T10540] syzkaller0: entered allmulticast mode [ 468.877487][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1328'. [ 468.890802][T10554] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 468.899729][T10554] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 469.353120][T10558] netlink: 'syz.0.1330': attribute type 39 has an invalid length. [ 469.976198][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 469.984242][ C0] lec:lec_tx_timeout: lec0 [ 469.995888][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 470.404165][T10578] warning: `syz.3.1335' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 470.465379][T10578] smc: net device wlan0 applied user defined pnetid SYZ0 [ 470.648451][T10578] netlink: set zone limit has 4 unknown bytes [ 470.672674][T10585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1338'. [ 470.692120][T10585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1338'. [ 471.521727][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1342'. [ 471.572930][T10599] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 471.589618][T10602] netlink: 'syz.4.1343': attribute type 39 has an invalid length. [ 471.645809][T10599] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 472.334541][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 473.231051][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1349'. [ 473.244457][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1349'. [ 474.649737][T10648] netlink: 'syz.3.1356': attribute type 39 has an invalid length. [ 475.006217][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 475.014443][ C0] lec:lec_tx_timeout: lec0 [ 475.026298][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 475.186689][T10659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1361'. [ 475.275476][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 475.351966][T10659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1361'. [ 475.963124][T10672] syzkaller0: entered promiscuous mode [ 475.968814][T10672] syzkaller0: entered allmulticast mode [ 479.155430][T10690] netlink: 'syz.0.1370': attribute type 39 has an invalid length. [ 479.901202][T10699] [ 479.903798][T10699] ====================================================== [ 479.911624][T10699] WARNING: possible circular locking dependency detected [ 479.918815][T10699] syzkaller #0 Not tainted [ 479.923320][T10699] ------------------------------------------------------ [ 479.930327][T10699] syz.1.1373/10699 is trying to acquire lock: [ 479.936648][T10699] ffffffff8fd53558 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 479.947417][T10699] [ 479.947417][T10699] but task is already holding lock: [ 479.954789][T10699] ffffffff8fd534f8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 479.964374][T10699] [ 479.964374][T10699] which lock already depends on the new lock. [ 479.964374][T10699] [ 479.974773][T10699] [ 479.974773][T10699] the existing dependency chain (in reverse order) is: [ 479.983788][T10699] [ 479.983788][T10699] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 479.991823][T10699] _raw_spin_lock_bh+0x36/0x50 [ 479.997202][T10699] nr_rt_ioctl+0x40c/0xf90 [ 480.002189][T10699] sock_do_ioctl+0x101/0x320 [ 480.007378][T10699] sock_ioctl+0x5c6/0x7f0 [ 480.012219][T10699] __se_sys_ioctl+0xfc/0x170 [ 480.017362][T10699] do_syscall_64+0x15f/0xf80 [ 480.022518][T10699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.029036][T10699] [ 480.029036][T10699] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 480.036257][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 480.037190][T10699] _raw_spin_lock_bh+0x36/0x50 [ 480.045164][ C0] lec:lec_tx_timeout: lec0 [ 480.050535][T10699] nr_rt_ioctl+0x215/0xf90 [ 480.050574][T10699] sock_do_ioctl+0x101/0x320 [ 480.050595][T10699] sock_ioctl+0x5c6/0x7f0 [ 480.050612][T10699] __se_sys_ioctl+0xfc/0x170 [ 480.050629][T10699] do_syscall_64+0x15f/0xf80 [ 480.056261][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 480.060048][T10699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.092588][T10699] [ 480.092588][T10699] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 480.100528][T10699] __lock_acquire+0x15a5/0x2cf0 [ 480.105992][T10699] lock_acquire+0x106/0x350 [ 480.111026][T10699] _raw_spin_lock_bh+0x36/0x50 [ 480.116308][T10699] nr_rt_device_down+0xbe/0x860 [ 480.121727][T10699] nr_device_event+0x137/0x150 [ 480.127292][T10699] notifier_call_chain+0x1ad/0x3d0 [ 480.133233][T10699] __dev_notify_flags+0x16d/0x310 [ 480.138861][T10699] netif_change_flags+0xe8/0x1a0 [ 480.144312][T10699] dev_change_flags+0x130/0x260 [ 480.149683][T10699] dev_ioctl+0x7b4/0x1150 [ 480.154673][T10699] sock_do_ioctl+0x23e/0x320 [ 480.159793][T10699] sock_ioctl+0x5c6/0x7f0 [ 480.164646][T10699] __se_sys_ioctl+0xfc/0x170 [ 480.169747][T10699] do_syscall_64+0x15f/0xf80 [ 480.174848][T10699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.181253][T10699] [ 480.181253][T10699] other info that might help us debug this: [ 480.181253][T10699] [ 480.191553][T10699] Chain exists of: [ 480.191553][T10699] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 480.191553][T10699] [ 480.205456][T10699] Possible unsafe locking scenario: [ 480.205456][T10699] [ 480.212966][T10699] CPU0 CPU1 [ 480.218316][T10699] ---- ---- [ 480.223769][T10699] lock(nr_neigh_list_lock); [ 480.228526][T10699] lock(&nr_node->node_lock); [ 480.235904][T10699] lock(nr_neigh_list_lock); [ 480.243085][T10699] lock(nr_node_list_lock); [ 480.247667][T10699] [ 480.247667][T10699] *** DEADLOCK *** [ 480.247667][T10699] [ 480.255806][T10699] 2 locks held by syz.1.1373/10699: [ 480.260999][T10699] #0: ffffffff8fbd7340 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 480.269801][T10699] #1: ffffffff8fd534f8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 480.279808][T10699] [ 480.279808][T10699] stack backtrace: [ 480.285703][T10699] CPU: 1 UID: 0 PID: 10699 Comm: syz.1.1373 Not tainted syzkaller #0 PREEMPT(full) [ 480.285722][T10699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.285738][T10699] Call Trace: [ 480.285748][T10699] [ 480.285756][T10699] dump_stack_lvl+0xe8/0x150 [ 480.285865][T10699] print_circular_bug+0x2e1/0x300 [ 480.285883][T10699] check_noncircular+0x12e/0x150 [ 480.285901][T10699] __lock_acquire+0x15a5/0x2cf0 [ 480.285929][T10699] ? nr_rt_device_down+0xbe/0x860 [ 480.285984][T10699] lock_acquire+0x106/0x350 [ 480.286004][T10699] ? nr_rt_device_down+0xbe/0x860 [ 480.286026][T10699] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 480.286045][T10699] ? nr_rt_device_down+0xbe/0x860 [ 480.286065][T10699] _raw_spin_lock_bh+0x36/0x50 [ 480.286081][T10699] ? nr_rt_device_down+0xbe/0x860 [ 480.286102][T10699] nr_rt_device_down+0xbe/0x860 [ 480.286123][T10699] ? nr_device_event+0x12f/0x150 [ 480.286147][T10699] nr_device_event+0x137/0x150 [ 480.286168][T10699] notifier_call_chain+0x1ad/0x3d0 [ 480.286188][T10699] __dev_notify_flags+0x16d/0x310 [ 480.286206][T10699] ? __pfx___dev_notify_flags+0x10/0x10 [ 480.286220][T10699] ? __dev_change_flags+0x4c6/0x690 [ 480.286236][T10699] ? __pfx___dev_change_flags+0x10/0x10 [ 480.286251][T10699] ? full_name_hash+0x92/0xe0 [ 480.286271][T10699] netif_change_flags+0xe8/0x1a0 [ 480.286287][T10699] dev_change_flags+0x130/0x260 [ 480.286311][T10699] dev_ioctl+0x7b4/0x1150 [ 480.286333][T10699] sock_do_ioctl+0x23e/0x320 [ 480.286353][T10699] ? __pfx_sock_do_ioctl+0x10/0x10 [ 480.286369][T10699] ? do_futex+0x333/0x420 [ 480.286396][T10699] sock_ioctl+0x5c6/0x7f0 [ 480.286414][T10699] ? __pfx_sock_ioctl+0x10/0x10 [ 480.286431][T10699] ? __fget_files+0x2a/0x420 [ 480.286459][T10699] ? __fget_files+0x3a0/0x420 [ 480.286478][T10699] ? __fget_files+0x2a/0x420 [ 480.286497][T10699] ? bpf_lsm_file_ioctl+0x9/0x20 [ 480.286522][T10699] ? __pfx_sock_ioctl+0x10/0x10 [ 480.286539][T10699] __se_sys_ioctl+0xfc/0x170 [ 480.286553][T10699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.286569][T10699] do_syscall_64+0x15f/0xf80 [ 480.286587][T10699] ? clear_bhb_loop+0x40/0x90 [ 480.286603][T10699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.286618][T10699] RIP: 0033:0x7fbb0859c799 [ 480.286641][T10699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.286655][T10699] RSP: 002b:00007fbb067f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.286704][T10699] RAX: ffffffffffffffda RBX: 00007fbb08815fa0 RCX: 00007fbb0859c799 [ 480.286715][T10699] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 480.286725][T10699] RBP: 00007fbb08632c99 R08: 0000000000000000 R09: 0000000000000000 [ 480.286735][T10699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.286744][T10699] R13: 00007fbb08816038 R14: 00007fbb08815fa0 R15: 00007ffdf5a14838 [ 480.286762][T10699] [ 480.622699][T10708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1377'. [ 480.637847][T10708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1377'. [ 485.066248][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 485.074269][ C0] lec:lec_tx_timeout: lec0 [ 485.079059][ C0] lec:lec_start_xmit: lec0:No lecd attached